rule luckscan {
  meta:
    author = "Tim Brown @timb_machine"
    description = "Hunts for references to luckscan"
  strings:
    $getopt = "%s <a-block> <port> [b-block] [c-block]"
    $vulnerable = "Lets try to root the %s"
  condition:
    $getopt or $vulnerable
}
